This Privacy Policy explains how FestFinder ("we", "us", "our") collects, uses, and protects your personal data when you use our website and services. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
FestFinder is the data controller for personal data collected through this website. If you have any questions about this policy or your data, contact us at [email protected].
2. What data we collect
- Account data — name, email address, and business details you provide when creating a trader account.
- Contact data — email addresses submitted through our newsletter or contact forms.
- Usage data — pages visited, listings viewed, and interactions with the site, collected via cookies and analytics.
- Technical data — IP address, browser type, device information, and approximate location.
3. How we use your data
We process your personal data for the following purposes:
- To provide and maintain the FestFinder service.
- To send you newsletters and pitch updates you've opted in to.
- To improve the website and understand how it's used.
- To comply with our legal obligations.
4. Legal basis for processing
We rely on the following lawful bases under UK GDPR: consent (for marketing emails and non-essential cookies), contract (to provide the service you've signed up for), legitimate interests (to improve and secure the site), and legal obligation (where we must retain records).
5. Sharing your data
We do not sell your personal data. We share it only with service providers who help us run FestFinder (for example hosting, email delivery, and analytics), under contracts that require them to protect your data. We may also disclose data where required by law.
6. International transfers
Some of our service providers are based outside the UK. Where this is the case, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or equivalent.
7. How long we keep your data
We retain personal data only for as long as necessary for the purposes set out above, or as required by law. Account data is retained while your account is active and for a reasonable period after closure.
8. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request erasure of your data in certain circumstances.
- Object to, or restrict, processing of your data.
- Request data portability.
- Withdraw consent at any time.
To exercise any of these rights, email [email protected]. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
9. Security
We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or alteration.
10. Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "last updated" date.